Release Note · R-2026.08

Product Squads · AI and Data · ask-ai-agent.md

Updated tag date

2026-09-03

Rollback criteria

error rate > 2% for 10 min → rollback

Still open 3

B5 UAT C8 Capacity C9 Cost

Sign-off

• ○ Release Manager — May
• ○ Product Owner — PO
• ✓ Technical Lead — Din 2026-09-03
• ○ DevOps Lead — Pond & Din
• ○ QA Lead — Junior & Jah

Product Squads · Space and Workforce OS (Core) · analytics.md

Branch

master

Tag

release-7a9bdae9be7e788221ddfba77a2742440d0435f3

Updated tag date

2026-08-27

Rollback criteria

error rate > 2% for 10 min → rollback

Sign-off

• ○ Release Manager — May
• ○ Product Owner — PO
• ○ Technical Lead — Ray & Din
• ○ DevOps Lead — Pond & Din
• ✓ QA Lead — Junior & Jah 03/09/2026

Product Squads · Space and Workforce OS (Core) · analytics-ai.md

Branch

1.0/feture/CU-production-26-aug-2026

Tag

release-e6f52d9e4b386898ddcda0cd81c1126c8060b683

Release Manager

May

Updated tag date

2026-08-27

Rollback criteria

error rate > 2% for 10 min → rollback

Sign-off

• ○ Release Manager — May
• ○ Product Owner — PO
• ○ Technical Lead — Ray & Din
• ○ DevOps Lead — Pond & Din
• ✓ QA Lead — Junior & Jah 03/09/2026

Product Squads · Ask · ask.md

Branch

master @ 49bd60a — develop → release → master was promoted on 2026-09-02, so master now carries the release, including the production pipeline it lacked before. develop is 0 ahead.

Tag

none — no git tag has ever been cut in conicle/ask (git tag -l → 0). B2d's image scan has no target until one is; planned for the next round together with the APP_VERSION build stamp.

Release Manager

TODO(human) — unassigned

Updated tag date

2026-09-01

Rollback criteria

error rate > 2% for 10 min → rollback

Waived / accepted 7

• waivedB1 Code Review
  • Waived 2026-09-02 — no PR, no CODEOWNERS. One-developer squad, so peer approval is structurally unavailable. Compensating control: the AI review pass below. Accepter: TODO(human)
• waivedB2 Secrets & Code Quality
  • Waived 2026-09-02 — container runs as root. Each Cloud Run instance is its own sandbox, and the fix cannot be verified without a rebuild plus a smoke run.
  • Waived 2026-09-03 — accepted on the measured severity, not on the finding being clean. The committed GitLab credential is a read-only deploy token (probed 2026-09-01: push 403, REST API 401), so the exposure is contained source disclosure across four library-python repos rather than a supply-chain compromise. Accepter: TODO(human)
• waivedB3 Integration & E2E
  • Waived 2026-09-03 — accepted with the residual exactly as documented above: no Playwright/Cypress browser E2E and no Pact/Schemathesis contract suite. Compensating control: 1674 unit tests at 95.02% coverage (B4) plus the 6/6 smoke pass. Accepter: TODO(human)
• waivedB4 Unit Testing
  • Waived 2026-09-02 — no CI-run evidence for this commit, changed-line coverage unmeasured. No Cloud Build history access, and no Codecov project exists, so nobody can measure changed-line until one does.
• waivedB5 UAT
  • Waived 2026-09-03 — no UAT plan, script or sign-off artefact exists and none will be produced for this release. Accepted on the strength of B3's smoke pass and B4's 1674-test suite. Accepter: TODO(human)
• waivedB6 Database Migrations
  • Waived 2026-09-02 — 024 has no reverse path. Its in-place UPDATE destroys what reversing needs, and it raises rather than pretending to roll back.
  • Waived 2026-09-02 — no dry-run or rollback log. Both need a production-sized staging clone that does not exist.
• waivedB7 Config & Feature Flags
  • Waived 2026-09-02 — the deploy sets no environment. gcloud run deploy passes only --image and --region, so production config stays console-managed and undiffable, and the first deploy must set all 36 keys by hand.
  • Waived 2026-09-02 — no runtime kill-switch. settings is read once at import and no org flag service exists; not something Ask can fix alone.

Still open 11

B8 Performance B9 Documentation C1 SAST/DAST C2 IaC C3 Observability C4 Pipeline C5 Alerting C6 Backup & Rollback C7 Access Control C8 Capacity C9 Cost

Sign-off

• ○ Release Manager — May
• ○ Product Owner — Faii PO
• ✓ Technical Lead — Din 2026-09-03
• ○ DevOps Lead — Pond & Din
• ○ QA Lead — Faii